fix XSS vulnerability

exelab · Feb 8, 2018 · 39c9952 · 39c9952 · kraftbj · Feb 21, 2018
1 parent a729f20
commit 39c9952
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/class-bjgk-genesis-enews-extended.php b/class-bjgk-genesis-enews-extended.php
@@ -98,7 +98,7 @@ function widget( $args, $instance ) {
 		}
 
 		// Establishes current URL for MailPoet action fields.
-		$current_url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
+		$current_url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . esc_attr( $_SERVER['REQUEST_URI'] );
 
 		echo $before_widget . '<div class="enews">';